# Vercy AI instruction - YAML 1.2 (JSON-compatible) { "vercy": "1.0-draft", "publication": { "status": "published", "adjudicationStatus": "reviewable-draft", "publishableCanonical": false, "generatedAt": "2026-10-21T16:50:19Z", "synthesisSha256": "cb9dc7be99933775c5861735aa1010afa4a604955e6e1c6b63e4456534d6c248", "providerMode": "single-provider-waiver", "providers": [ "Codex" ], "waivedProviders": [ "Claude", "Grok" ] }, "metaModel": { "id": "WM-MEM-013", "registryId": "vr.wm-mem-013", "name": "Context Assembly", "version": "0.1.0", "previousVersions": [], "entryKind": "aggregate", "family": "World Models", "category": "Information and virtual systems", "industry": [ "Cross-industry" ], "domain": [ "INF.MEM.CTX" ], "tags": [ "context", "assembly", "inf.mem.ctx" ], "status": "published" }, "canonicalUrl": "https://ver.cy/models/wm-mem-013-context-assembly/", "sourceUrl": "https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/research/runs/wm-mem-013", "model": { "registry_id": "vr.wm-mem-013", "model_id": "WM-MEM-013", "name": "Context Assembly", "entry_kind": "aggregate", "purpose": "Record the selected, ordered and transformed inputs prepared for one model invocation, their source lineage, budget accounting and visibility limits.", "scope_statement": "A versioned input aggregate with locally owned membership, placement, transformation and accounting records. A sealed revision describes the observable assembly at a declared capture boundary for one intended invocation. Preparation, dispatch and runtime-reported effective context are distinct assertions. An assembly may be rejected, empty under a permitted profile, partially observable or never dispatched. All hierarchy and operation details are proposed local design informed by the cited specifications, not requirements imposed by those specifications.", "in_scope": [ "Assembly and revision identity, invocation binding, custody and referenced policy decisions", "Candidate dispositions, source states, permitted transformations, ordered content blocks and representation details", "Budget estimates and measurements, overflow outcomes, sealing evidence, recipient projections and retention of assembly copies" ], "out_of_scope": [ "Memory store and item lifecycle, retrieval algorithms and index construction, durable memory consolidation", "Policy definition or enforcement, trust scoring, access grants, redaction execution and incident management", "Model execution, output quality, answer grounding, tool execution, hidden internal state reconstruction and universal token accounting" ], "boundary_notes": [ { "neighbor": "WM-AI-004 AI Inference / Agent Run", "distinction": "Reference the intended invocation and observed dispatch receipt. Registry parent is not ratified subtype inheritance: an assembly is an input aggregate, not the execution, output, tool loop or cost ledger.", "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] }, { "neighbor": "WM-MEM-002 Memory Item", "distinction": "Source memory keeps its identity and lifecycle. Assembly membership captures a version-qualified projection; copying it does not create new authoritative memory.", "source_refs": [ "SRC-001", "SRC-003" ] }, { "neighbor": "WM-MEM-007 Memory Recall Event", "distinction": "Reference retrieval candidate batches and ranks when present. This model records inclusion decisions for available candidates, not querying or ranking the corpus.", "source_refs": [ "SRC-001", "SRC-003" ] }, { "neighbor": "WM-MEM-008 Memory Consolidation", "distinction": "Transient assembly transformation records do not own durable merging, memory retirement or consolidation policy.", "source_refs": [ "SRC-003", "SRC-004" ] }, { "neighbor": "WM-MEM-009 Memory Conflict and Precedence Rule", "distinction": "Reference the rule and recorded conflict disposition. A similarity score, recency or slot position cannot establish authority or truth.", "source_refs": [ "SRC-003", "SRC-005" ] }, { "neighbor": "WM-MEM-010 Memory Retention and Forgetting Policy", "distinction": "Reference an applicable disposal policy for assembly copies; source-memory erasure remains externally executed.", "source_refs": [ "SRC-003", "SRC-005" ] }, { "neighbor": "WM-MEM-011 Memory Scope and Sharing Grant", "distinction": "Reference recipient, purpose and tenant authorization decisions; this model cannot grant access or infer it from readability.", "source_refs": [ "SRC-001", "SRC-005" ] }, { "neighbor": "WM-MEM-014 Retrieval Index", "distinction": "Index configuration and refresh remain external; snapshot and retrieval references may qualify a candidate batch.", "source_refs": [ "SRC-001", "SRC-003" ] }, { "neighbor": "WM-MEM-015 Retrieval Passage", "distinction": "Passage masters retain segmentation and source lineage. The assembly records only the included representation, selector and placement.", "source_refs": [ "SRC-003", "SRC-004" ] }, { "neighbor": "WM-MEM-016 Answer Grounding", "distinction": "Inclusion is not evidence of causal use or answer support. Claim-to-source grounding and answer evaluation remain external.", "source_refs": [ "SRC-003", "SRC-008" ] }, { "neighbor": "WM-MEM-017 Context Policy", "distinction": "Reference policy revision and decision evidence. Rule definition, precedence governance and enforcement remain external.", "source_refs": [ "SRC-002", "SRC-005" ] }, { "neighbor": "WM-MEM-018 Memory Trust Assessment", "distinction": "Reference a qualified assessment with its scope and validity, without generating a new trust score.", "source_refs": [ "SRC-003", "SRC-005" ] }, { "neighbor": "WM-MEM-020 Memory Quarantine and Redaction", "distinction": "Reference authorized redaction or quarantine outcomes and resulting representations. The assembly does not release quarantined memory or implement the redaction service.", "source_refs": [ "SRC-003", "SRC-005" ] } ] }, "sources": [ { "id": "SRC-001", "title": "MCP Resources", "organization": "MCP", "url": "https://modelcontextprotocol.io/specification/2025-06-18/server/resources", "version_or_date": "2025-06-18", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Resource identity, content forms and advisory annotations motivate explicit input membership and source bindings." }, { "id": "SRC-002", "title": "MCP Sampling", "organization": "MCP", "url": "https://modelcontextprotocol.io/specification/2025-06-18/client/sampling", "version_or_date": "2025-06-18", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Client control and sampling message forms motivate invocation binding and visible final assembly; not a universal input budget specification." }, { "id": "SRC-003", "title": "PROV-O: The PROV Ontology", "organization": "W3C", "url": "https://www.w3.org/TR/prov-o/", "version_or_date": "Recommendation 2013-04-30", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Entity, activity, derivation and attribution provide conceptual provenance alignment; they do not certify truth or authorization." }, { "id": "SRC-004", "title": "Web Annotation Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/annotation-model/", "version_or_date": "Recommendation 2017-02-23", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Selectors and resource states motivate version-qualified source spans. Character positions, bytes and token positions are distinct." }, { "id": "SRC-005", "title": "LLM Prompt Injection Prevention Cheat Sheet", "organization": "OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/LLM_Prompt_Injection_Prevention_Cheat_Sheet.html", "version_or_date": "Living guidance, selected sections reviewed 2026-10-21; immutable revision pending", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Policy-level separation of instructions and data, least privilege and defense in depth; labels alone do not enforce a trust boundary." }, { "id": "SRC-006", "title": "RFC 3339: Date and Time on the Internet: Timestamps", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc3339", "version_or_date": "July 2002, sections 4 and 5", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Explicit offsets and seconds for assembly observations; time ordering and uncertainty require additional local rules." }, { "id": "SRC-007", "title": "RFC 8785: JSON Canonicalization Scheme", "organization": "RFC Editor", "url": "https://www.rfc-editor.org/rfc/rfc8785", "version_or_date": "June 2020, Informational independent-stream RFC", "source_type": "standard", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Optional deterministic JSON representation for integrity comparison. This is not a mandatory storage format or an Internet Standards Track specification." }, { "id": "SRC-008", "title": "OpenTelemetry semantic conventions for generative AI client inference", "organization": "OpenTelemetry", "url": "https://raw.githubusercontent.com/open-telemetry/semantic-conventions-genai/main/docs/gen-ai/client-inference.md", "version_or_date": "Development document, main observed 2026-10-21; immutable revision pending", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T16:48:02Z", "relevance": "Separate requested limits, reported usage and cached or modality subsets; telemetry is evidence to reconcile, not proof of exact effective context." } ], "structure": { "bundles": [ { "id": "boundary-bundle", "name": "Identity and governing context", "description": "Make the aggregate, invocation and external authority distinguishable.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003", "SRC-005", "SRC-008" ], "layers": [ { "id": "identity-layer", "name": "Assembly identity and capture boundary", "description": "Identify a single invocation-bound aggregate and its revision. A prepared payload is not proof of dispatch or of the runtime effective input. Missing hidden material is recorded as unknown, never as empty.", "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ], "findings": [ { "id": "identity-finding", "name": "Assembly identity and capture boundary", "description": "Identify a single invocation-bound aggregate and its revision. A prepared payload is not proof of dispatch or of the runtime effective input. Missing hidden material is recorded as unknown, never as empty.", "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ], "questions": [ { "id": "identity-q1", "text": "Which master identifier and revision distinguish this assembly from its invocation and earlier assemblies?", "kind": "identity", "answer_data": [ "assembly_id", "revision_id", "master_namespace", "invocation_ref", "predecessor_ref" ] }, { "id": "identity-q2", "text": "At which capture boundary and observation level is the context represented?", "kind": "classification", "answer_data": [ "capture_stage", "observer", "visibility_scope", "unavailable_components", "observation_basis" ] }, { "id": "identity-q3", "text": "Which intended invocation or retry is bound to this assembly revision?", "kind": "relationship", "answer_data": [ "invocation_ref", "attempt_ref", "binding_time", "reuse_or_derivation_basis" ] }, { "id": "identity-q4", "text": "Which accountable role maintains the assembly and its disclosure decisions?", "kind": "ownership", "answer_data": [ "custodian_role", "tenant_ref", "purpose", "authority_ref" ] } ], "data_elements": [ { "id": "identity-data1", "name": "Assembly identity and capture boundary - identity record", "description": "Candidate structured answer group: assembly_id; revision_id; master_namespace; invocation_ref; predecessor_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] }, { "id": "identity-data2", "name": "Assembly identity and capture boundary - classification record", "description": "Candidate structured answer group: capture_stage; observer; visibility_scope; unavailable_components; observation_basis. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] }, { "id": "identity-data3", "name": "Assembly identity and capture boundary - relationship record", "description": "Candidate structured answer group: invocation_ref; attempt_ref; binding_time; reuse_or_derivation_basis. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] }, { "id": "identity-data4", "name": "Assembly identity and capture boundary - ownership record", "description": "Candidate structured answer group: custodian_role; tenant_ref; purpose; authority_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] } ], "artifacts": [ { "id": "identity-artifact", "name": "Assembly identity and capture boundary record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "policy-layer", "name": "Policy and authority bindings", "description": "Record version-pinned decision references for permitted input roles, purposes and recipients. Content priority is advisory; trusted status requires external authority. A conflicting or expired mandatory decision blocks sealing.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "findings": [ { "id": "policy-finding", "name": "Policy and authority bindings", "description": "Record version-pinned decision references for permitted input roles, purposes and recipients. Content priority is advisory; trusted status requires external authority. A conflicting or expired mandatory decision blocks sealing.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "questions": [ { "id": "policy-q1", "text": "Which policy revision authorizes this assembly for its recipient and purpose?", "kind": "authority", "answer_data": [ "policy_ref", "policy_revision", "decision_ref", "recipient_scope", "effective_interval" ] }, { "id": "policy-q2", "text": "Which current grant permits each selected source representation to cross the declared boundary?", "kind": "access", "answer_data": [ "membership_id", "grant_ref", "tenant_scope", "destination_scope", "recheck_time", "decision" ] }, { "id": "policy-q3", "text": "How is untrusted source content kept distinct from authorized instructions in this assembly?", "kind": "security", "answer_data": [ "origin_role", "assigned_role", "trust_assessment_ref", "permitted_role_mapping", "unresolved_role_conflicts" ] }, { "id": "policy-q4", "text": "What happens when mandatory policy bindings conflict or cannot be resolved?", "kind": "exception", "answer_data": [ "conflict_refs", "external_disposition_ref", "blocking_reason", "responsible_role", "resolution_state" ] } ], "data_elements": [ { "id": "policy-data1", "name": "Policy and authority bindings - authority record", "description": "Candidate structured answer group: policy_ref; policy_revision; decision_ref; recipient_scope; effective_interval. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "policy-data2", "name": "Policy and authority bindings - access record", "description": "Candidate structured answer group: membership_id; grant_ref; tenant_scope; destination_scope; recheck_time; decision. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "policy-data3", "name": "Policy and authority bindings - security record", "description": "Candidate structured answer group: origin_role; assigned_role; trust_assessment_ref; permitted_role_mapping; unresolved_role_conflicts. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "policy-data4", "name": "Policy and authority bindings - exception record", "description": "Candidate structured answer group: conflict_refs; external_disposition_ref; blocking_reason; responsible_role; resolution_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "artifacts": [ { "id": "policy-artifact", "name": "Policy and authority bindings record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "origin-bundle", "name": "Source provenance and time", "description": "Keep the included source representation and its temporal qualifications traceable.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-006", "SRC-007" ], "layers": [ { "id": "sources-layer", "name": "Source identity and representation", "description": "Bind every member to a source version or an explicitly unavailable provenance state, including direct user input and local templates. A URI is a locator, not immutable content. A digest identifies bytes under a declared method, not their trustworthiness.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ], "findings": [ { "id": "sources-finding", "name": "Source identity and representation", "description": "Bind every member to a source version or an explicitly unavailable provenance state, including direct user input and local templates. A URI is a locator, not immutable content. A digest identifies bytes under a declared method, not their trustworthiness.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ], "questions": [ { "id": "sources-q1", "text": "Which source version or direct-input event produced each candidate representation?", "kind": "provenance", "answer_data": [ "candidate_id", "source_master_ref", "source_revision", "input_event_ref", "locator", "unknown_reason" ] }, { "id": "sources-q2", "text": "Which exact portion and representation of a source was made available to the assembler?", "kind": "composition", "answer_data": [ "representation_ref", "media_type", "selector_type", "selector_units", "start", "end", "source_state" ] }, { "id": "sources-q3", "text": "What evidence binds a captured representation to its claimed source?", "kind": "evidence", "answer_data": [ "capture_ref", "digest_algorithm", "digest_scope", "digest_value", "attribution", "verification_state" ] }, { "id": "sources-q4", "text": "How are unresolved selectors or changed source versions represented without silent substitution?", "kind": "validation", "answer_data": [ "resolution_state", "observed_version", "expected_version", "mismatch_reason", "blocked_or_qualified_disposition" ] } ], "data_elements": [ { "id": "sources-data1", "name": "Source identity and representation - provenance record", "description": "Candidate structured answer group: candidate_id; source_master_ref; source_revision; input_event_ref; locator; unknown_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ] }, { "id": "sources-data2", "name": "Source identity and representation - composition record", "description": "Candidate structured answer group: representation_ref; media_type; selector_type; selector_units; start; end; source_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ] }, { "id": "sources-data3", "name": "Source identity and representation - evidence record", "description": "Candidate structured answer group: capture_ref; digest_algorithm; digest_scope; digest_value; attribution; verification_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ] }, { "id": "sources-data4", "name": "Source identity and representation - validation record", "description": "Candidate structured answer group: resolution_state; observed_version; expected_version; mismatch_reason; blocked_or_qualified_disposition. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ] } ], "artifacts": [ { "id": "sources-artifact", "name": "Source identity and representation record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "freshness-layer", "name": "Temporal validity and freshness", "description": "Separate source effective time, source modification time, retrieval time and assembly observation time. Freshness is a policy judgment with a reference, not an inference from the latest timestamp. Unknown clock precision remains visible.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "findings": [ { "id": "freshness-finding", "name": "Temporal validity and freshness", "description": "Separate source effective time, source modification time, retrieval time and assembly observation time. Freshness is a policy judgment with a reference, not an inference from the latest timestamp. Unknown clock precision remains visible.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "questions": [ { "id": "freshness-q1", "text": "Which source effective and observation times apply at the assembly cutoff?", "kind": "temporal", "answer_data": [ "effective_start", "effective_end", "source_modified_at", "retrieved_at", "assembly_cutoff", "time_basis" ] }, { "id": "freshness-q2", "text": "Which external freshness decision permits a source whose age or validity is uncertain?", "kind": "quality", "answer_data": [ "freshness_policy_ref", "decision_ref", "age_measurement", "validity_state", "uncertainty" ] }, { "id": "freshness-q3", "text": "Which source updates or grant revocations occurred between selection and sealing?", "kind": "event", "answer_data": [ "change_notice_ref", "recheck_at", "affected_members", "resulting_revision_or_refusal" ] }, { "id": "freshness-q4", "text": "How is an unavailable or stale source handled when its content is required?", "kind": "exception", "answer_data": [ "required_member_ref", "fallback_policy_ref", "authorized_substitute_ref", "refusal_reason" ] } ], "data_elements": [ { "id": "freshness-data1", "name": "Temporal validity and freshness - temporal record", "description": "Candidate structured answer group: effective_start; effective_end; source_modified_at; retrieved_at; assembly_cutoff; time_basis. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "freshness-data2", "name": "Temporal validity and freshness - quality record", "description": "Candidate structured answer group: freshness_policy_ref; decision_ref; age_measurement; validity_state; uncertainty. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "freshness-data3", "name": "Temporal validity and freshness - event record", "description": "Candidate structured answer group: change_notice_ref; recheck_at; affected_members; resulting_revision_or_refusal. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "freshness-data4", "name": "Temporal validity and freshness - exception record", "description": "Candidate structured answer group: required_member_ref; fallback_policy_ref; authorized_substitute_ref; refusal_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "artifacts": [ { "id": "freshness-artifact", "name": "Temporal validity and freshness record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "selection-bundle", "name": "Selection and derivation", "description": "Explain membership decisions and information changes without owning retrieval or durable memory.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-005" ], "layers": [ { "id": "selection-layer", "name": "Candidate inclusion and omission", "description": "Record the considered candidate set and its known completeness, then distinguish inclusion, exclusion, deferral and unavailable content. Ranking and deduplication reasons are inputs from a declared policy or retrieval event; they do not prove truth. Omission logs must not leak denied payloads.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "findings": [ { "id": "selection-finding", "name": "Candidate inclusion and omission", "description": "Record the considered candidate set and its known completeness, then distinguish inclusion, exclusion, deferral and unavailable content. Ranking and deduplication reasons are inputs from a declared policy or retrieval event; they do not prove truth. Omission logs must not leak denied payloads.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "questions": [ { "id": "selection-q1", "text": "Why was each considered candidate included or excluded from this assembly?", "kind": "decision", "answer_data": [ "candidate_id", "disposition", "reason_code", "policy_decision_ref", "considered_set_scope" ] }, { "id": "selection-q2", "text": "Which recall event or manual selection supplied the candidate set and ranking evidence?", "kind": "relationship", "answer_data": [ "candidate_batch_ref", "recall_ref", "manual_selection_ref", "ranking_method_ref", "rank", "score_semantics" ] }, { "id": "selection-q3", "text": "Which required members and dependency groups must survive selection together?", "kind": "constraint", "answer_data": [ "mandatory_members", "dependency_groups", "exclusion_constraints", "completeness_state" ] }, { "id": "selection-q4", "text": "Which omission details can be retained without revealing restricted source content?", "kind": "privacy", "answer_data": [ "permitted_metadata", "redaction_ref", "opaque_candidate_ref", "audit_scope", "withholding_reason" ] } ], "data_elements": [ { "id": "selection-data1", "name": "Candidate inclusion and omission - decision record", "description": "Candidate structured answer group: candidate_id; disposition; reason_code; policy_decision_ref; considered_set_scope. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "selection-data2", "name": "Candidate inclusion and omission - relationship record", "description": "Candidate structured answer group: candidate_batch_ref; recall_ref; manual_selection_ref; ranking_method_ref; rank; score_semantics. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "selection-data3", "name": "Candidate inclusion and omission - constraint record", "description": "Candidate structured answer group: mandatory_members; dependency_groups; exclusion_constraints; completeness_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "selection-data4", "name": "Candidate inclusion and omission - privacy record", "description": "Candidate structured answer group: permitted_metadata; redaction_ref; opaque_candidate_ref; audit_scope; withholding_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "selection-artifact", "name": "Candidate inclusion and omission record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "transform-layer", "name": "Transformation lineage and losses", "description": "Record assembly-local derivations such as excerpting, summarization, normalization and authorized redaction results. Preserve input-to-output lineage and disclosed loss. Summary content remains derived evidence and cannot silently replace its sources or acquire higher authority.", "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ], "findings": [ { "id": "transform-finding", "name": "Transformation lineage and losses", "description": "Record assembly-local derivations such as excerpting, summarization, normalization and authorized redaction results. Preserve input-to-output lineage and disclosed loss. Summary content remains derived evidence and cannot silently replace its sources or acquire higher authority.", "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ], "questions": [ { "id": "transform-q1", "text": "Which ordered transformations produced the representation selected for inclusion?", "kind": "process", "answer_data": [ "transformation_id", "method_ref", "method_version", "input_refs", "output_ref", "order", "actor_ref" ] }, { "id": "transform-q2", "text": "Which source qualifications or contrary assertions were lost or preserved by a transformation?", "kind": "quality", "answer_data": [ "loss_report", "preserved_qualifications", "contradictory_source_refs", "reviewer_ref", "fidelity_state" ] }, { "id": "transform-q3", "text": "Which external decision authorizes using a redacted or quarantined derivative?", "kind": "security", "answer_data": [ "redaction_decision_ref", "permitted_derivative_ref", "quarantine_state_ref", "scope", "unresolved_reason" ] }, { "id": "transform-q4", "text": "Can each included derivative be traced to all of its inputs without claiming deterministic regeneration?", "kind": "provenance", "answer_data": [ "derivation_edges", "missing_input_refs", "method_parameters_ref", "reproducibility_limits", "random_state_availability" ] } ], "data_elements": [ { "id": "transform-data1", "name": "Transformation lineage and losses - process record", "description": "Candidate structured answer group: transformation_id; method_ref; method_version; input_refs; output_ref; order; actor_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "transform-data2", "name": "Transformation lineage and losses - quality record", "description": "Candidate structured answer group: loss_report; preserved_qualifications; contradictory_source_refs; reviewer_ref; fidelity_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "transform-data3", "name": "Transformation lineage and losses - security record", "description": "Candidate structured answer group: redaction_decision_ref; permitted_derivative_ref; quarantine_state_ref; scope; unresolved_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "transform-data4", "name": "Transformation lineage and losses - provenance record", "description": "Candidate structured answer group: derivation_edges; missing_input_refs; method_parameters_ref; reproducibility_limits; random_state_availability. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] } ], "artifacts": [ { "id": "transform-artifact", "name": "Transformation lineage and losses record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "representation-bundle", "name": "Ordered input representation", "description": "Preserve semantic order, content forms and limits of visibility.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003", "SRC-004", "SRC-005", "SRC-008" ], "layers": [ { "id": "layout-layer", "name": "Order roles and dependency preservation", "description": "Record logical sequence and role mapping separately from the final serialization. Order is semantically significant. Tool declarations, calls and results are inert input records here; preserve their linkage and required grouping under the selected interface profile.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ], "findings": [ { "id": "layout-finding", "name": "Order roles and dependency preservation", "description": "Record logical sequence and role mapping separately from the final serialization. Order is semantically significant. Tool declarations, calls and results are inert input records here; preserve their linkage and required grouping under the selected interface profile.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ], "questions": [ { "id": "layout-q1", "text": "What is the exact sequence of included members at the capture boundary?", "kind": "composition", "answer_data": [ "ordered_membership_ids", "slot_ids", "role", "grouping", "sequence_basis" ] }, { "id": "layout-q2", "text": "Which message or tool-related dependencies must the assembly preserve?", "kind": "requirement", "answer_data": [ "call_result_refs", "declaration_refs", "dependency_profile", "required_groups", "unresolved_links" ] }, { "id": "layout-q3", "text": "How does the target interface map logical roles and ordering into its representation?", "kind": "interoperability", "answer_data": [ "binding_profile", "binding_version", "role_mapping", "serialized_order", "loss_report" ] }, { "id": "layout-q4", "text": "Which placement changes require a new revision and renewed authority checks?", "kind": "validation", "answer_data": [ "changed_slots", "changed_roles", "expected_revision", "required_rechecks", "revision_reason" ] } ], "data_elements": [ { "id": "layout-data1", "name": "Order roles and dependency preservation - composition record", "description": "Candidate structured answer group: ordered_membership_ids; slot_ids; role; grouping; sequence_basis. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "layout-data2", "name": "Order roles and dependency preservation - requirement record", "description": "Candidate structured answer group: call_result_refs; declaration_refs; dependency_profile; required_groups; unresolved_links. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "layout-data3", "name": "Order roles and dependency preservation - interoperability record", "description": "Candidate structured answer group: binding_profile; binding_version; role_mapping; serialized_order; loss_report. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "layout-data4", "name": "Order roles and dependency preservation - validation record", "description": "Candidate structured answer group: changed_slots; changed_roles; expected_revision; required_rechecks; revision_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "layout-artifact", "name": "Order roles and dependency preservation record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "content-layer", "name": "Content forms and opaque state", "description": "Represent text, structured data, images, audio and externally referenced state with their own media and measurement basis. A description or transcript is a separate derivative. Hidden runtime additions and opaque cache handles constrain what the assembly can claim to reconstruct.", "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ], "findings": [ { "id": "content-finding", "name": "Content forms and opaque state", "description": "Represent text, structured data, images, audio and externally referenced state with their own media and measurement basis. A description or transcript is a separate derivative. Hidden runtime additions and opaque cache handles constrain what the assembly can claim to reconstruct.", "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ], "questions": [ { "id": "content-q1", "text": "Which content forms and encodings occur in the assembled input?", "kind": "classification", "answer_data": [ "membership_id", "media_type", "encoding", "language", "modality", "representation_ref" ] }, { "id": "content-q2", "text": "How are lengths or extents measured for each content form?", "kind": "measurement", "answer_data": [ "measure_value", "unit", "measurement_method", "coordinate_basis", "resolution_or_duration", "uncertainty" ] }, { "id": "content-q3", "text": "Which cached or remotely retained context components are referenced but not locally visible?", "kind": "state", "answer_data": [ "opaque_state_ref", "cache_binding_ref", "visibility_state", "expiry", "permission_recheck", "unknown_extent" ] }, { "id": "content-q4", "text": "What limits prevent reconstructing the runtime input from this visible assembly?", "kind": "exception", "answer_data": [ "hidden_component_categories", "adapter_changes", "missing_payloads", "reconstruction_level", "limitation_reason" ] } ], "data_elements": [ { "id": "content-data1", "name": "Content forms and opaque state - classification record", "description": "Candidate structured answer group: membership_id; media_type; encoding; language; modality; representation_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ] }, { "id": "content-data2", "name": "Content forms and opaque state - measurement record", "description": "Candidate structured answer group: measure_value; unit; measurement_method; coordinate_basis; resolution_or_duration; uncertainty. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ] }, { "id": "content-data3", "name": "Content forms and opaque state - state record", "description": "Candidate structured answer group: opaque_state_ref; cache_binding_ref; visibility_state; expiry; permission_recheck; unknown_extent. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ] }, { "id": "content-data4", "name": "Content forms and opaque state - exception record", "description": "Candidate structured answer group: hidden_component_categories; adapter_changes; missing_payloads; reconstruction_level; limitation_reason. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ] } ], "artifacts": [ { "id": "content-artifact", "name": "Content forms and opaque state record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-001", "SRC-002", "SRC-004", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "capacity-bundle", "name": "Budget and admission", "description": "Expose the counting basis and reasons for acceptance or refusal.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ], "layers": [ { "id": "budget-layer", "name": "Budget profile and accounting basis", "description": "Use an adopting profile to define capacity, counting units and reserved output allowance. Record tokenizer and serializer versions, modality accounting and measurement uncertainty. Generation limits, input estimates, runtime reported usage and billed units are different quantities; no universal conversion is asserted.", "source_refs": [ "SRC-002", "SRC-008" ], "findings": [ { "id": "budget-finding", "name": "Budget profile and accounting basis", "description": "Use an adopting profile to define capacity, counting units and reserved output allowance. Record tokenizer and serializer versions, modality accounting and measurement uncertainty. Generation limits, input estimates, runtime reported usage and billed units are different quantities; no universal conversion is asserted.", "source_refs": [ "SRC-002", "SRC-008" ], "questions": [ { "id": "budget-q1", "text": "Which capacity and output reserve apply to the declared target profile?", "kind": "constraint", "answer_data": [ "profile_ref", "capacity_by_unit", "output_reserve", "fixed_overhead", "reserve_semantics", "effective_version" ] }, { "id": "budget-q2", "text": "Which counting method produced each input estimate or measured count?", "kind": "measurement", "answer_data": [ "tokenizer_ref", "tokenizer_version", "serializer_version", "modality_method", "value", "unit", "method", "uncertainty" ] }, { "id": "budget-q3", "text": "Which total reconciles member counts with wrappers and shared overhead without double counting?", "kind": "validation", "answer_data": [ "per_member_counts", "overhead_components", "total_input", "subset_relations", "reconciliation_residual" ] }, { "id": "budget-q4", "text": "Which counts are estimated, runtime reported or billing-derived rather than directly measured?", "kind": "quality", "answer_data": [ "count_origin", "measurement_scope", "observation_ref", "cached_subset_basis", "confidence", "comparability_limits" ] } ], "data_elements": [ { "id": "budget-data1", "name": "Budget profile and accounting basis - constraint record", "description": "Candidate structured answer group: profile_ref; capacity_by_unit; output_reserve; fixed_overhead; reserve_semantics; effective_version. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "budget-data2", "name": "Budget profile and accounting basis - measurement record", "description": "Candidate structured answer group: tokenizer_ref; tokenizer_version; serializer_version; modality_method; value; unit; method; uncertainty. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "budget-data3", "name": "Budget profile and accounting basis - validation record", "description": "Candidate structured answer group: per_member_counts; overhead_components; total_input; subset_relations; reconciliation_residual. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "budget-data4", "name": "Budget profile and accounting basis - quality record", "description": "Candidate structured answer group: count_origin; measurement_scope; observation_ref; cached_subset_basis; confidence; comparability_limits. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-008" ] } ], "artifacts": [ { "id": "budget-artifact", "name": "Budget profile and accounting basis record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-002", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "fit-layer", "name": "Overflow and admission outcome", "description": "For compatible additive units under a declared profile, compare final input plus reserved output plus any overhead not already counted with capacity. Do not sum incomparable modalities or subtract cached tokens merely because billing differs. Recount after any transformation; unknown mandatory budgets block a fit claim.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ], "findings": [ { "id": "fit-finding", "name": "Overflow and admission outcome", "description": "For compatible additive units under a declared profile, compare final input plus reserved output plus any overhead not already counted with capacity. Do not sum incomparable modalities or subtract cached tokens merely because billing differs. Recount after any transformation; unknown mandatory budgets block a fit claim.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ], "questions": [ { "id": "fit-q1", "text": "Does the final serialized representation fit every applicable budget constraint?", "kind": "validation", "answer_data": [ "final_count", "reserve", "uncounted_overhead", "capacity", "inequality_result", "uncertainty_margin", "profile_rule" ] }, { "id": "fit-q2", "text": "Which authorized reduction or refusal follows an overflow?", "kind": "decision", "answer_data": [ "overflow_amount", "reduction_policy_ref", "removed_members", "transformation_refs", "refusal_reason", "decision_ref" ] }, { "id": "fit-q3", "text": "Which protected instructions or dependencies prohibit otherwise possible truncation?", "kind": "requirement", "answer_data": [ "protected_groups", "mandatory_policy_refs", "minimum_content", "invalid_cut_reason", "disposition" ] }, { "id": "fit-q4", "text": "Was the modified assembly recounted and rechecked before being marked ready?", "kind": "process", "answer_data": [ "prior_revision", "new_revision", "recount_ref", "dependency_check", "authority_recheck", "ready_or_blocked" ] } ], "data_elements": [ { "id": "fit-data1", "name": "Overflow and admission outcome - validation record", "description": "Candidate structured answer group: final_count; reserve; uncounted_overhead; capacity; inequality_result; uncertainty_margin; profile_rule. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] }, { "id": "fit-data2", "name": "Overflow and admission outcome - decision record", "description": "Candidate structured answer group: overflow_amount; reduction_policy_ref; removed_members; transformation_refs; refusal_reason; decision_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] }, { "id": "fit-data3", "name": "Overflow and admission outcome - requirement record", "description": "Candidate structured answer group: protected_groups; mandatory_policy_refs; minimum_content; invalid_cut_reason; disposition. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] }, { "id": "fit-data4", "name": "Overflow and admission outcome - process record", "description": "Candidate structured answer group: prior_revision; new_revision; recount_ref; dependency_check; authority_recheck; ready_or_blocked. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] } ], "artifacts": [ { "id": "fit-artifact", "name": "Overflow and admission outcome record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "assurance-bundle", "name": "Sealing and controlled continuity", "description": "Bind the final visible representation to evidence and govern its local copies.", "rationale": "Proposed local grouping grounded in selected open specifications; profile validation and conformance remain separate gates.", "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ], "layers": [ { "id": "seal-layer", "name": "Sealed revision and delivery evidence", "description": "Seal the observable assembly with a defined digest scope and immutable revision reference. Record dispatch and receipt only from external evidence. Runtime acceptance or token usage cannot prove all included members were attended to or used in an answer. A failed attempt remains a record.", "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ], "findings": [ { "id": "seal-finding", "name": "Sealed revision and delivery evidence", "description": "Seal the observable assembly with a defined digest scope and immutable revision reference. Record dispatch and receipt only from external evidence. Runtime acceptance or token usage cannot prove all included members were attended to or used in an answer. A failed attempt remains a record.", "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ], "questions": [ { "id": "seal-q1", "text": "Which checks allow the assembly to move from prepared to sealed or rejected?", "kind": "lifecycle", "answer_data": [ "state", "check_results", "blockers", "sealed_revision", "actor_ref", "transition_evidence" ] }, { "id": "seal-q2", "text": "Which serialized artifact and integrity method identify the sealed input representation?", "kind": "evidence", "answer_data": [ "payload_ref", "manifest_ref", "digest_scope", "canonicalization_profile", "digest_value", "integrity_result" ] }, { "id": "seal-q3", "text": "What external evidence distinguishes dispatch, acceptance and failure for this revision?", "kind": "event", "answer_data": [ "dispatch_ref", "receipt_ref", "error_ref", "observed_at", "runtime_reported_input_ref", "unknown_state" ] }, { "id": "seal-q4", "text": "How is a retry or reused context linked without claiming equivalent runtime behavior?", "kind": "relationship", "answer_data": [ "attempt_ref", "source_assembly_ref", "reused_components", "changed_profile", "reauthorization_ref", "equivalence_limits" ] } ], "data_elements": [ { "id": "seal-data1", "name": "Sealed revision and delivery evidence - lifecycle record", "description": "Candidate structured answer group: state; check_results; blockers; sealed_revision; actor_ref; transition_evidence. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ] }, { "id": "seal-data2", "name": "Sealed revision and delivery evidence - evidence record", "description": "Candidate structured answer group: payload_ref; manifest_ref; digest_scope; canonicalization_profile; digest_value; integrity_result. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ] }, { "id": "seal-data3", "name": "Sealed revision and delivery evidence - event record", "description": "Candidate structured answer group: dispatch_ref; receipt_ref; error_ref; observed_at; runtime_reported_input_ref; unknown_state. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ] }, { "id": "seal-data4", "name": "Sealed revision and delivery evidence - relationship record", "description": "Candidate structured answer group: attempt_ref; source_assembly_ref; reused_components; changed_profile; reauthorization_ref; equivalence_limits. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ] } ], "artifacts": [ { "id": "seal-artifact", "name": "Sealed revision and delivery evidence record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-003", "SRC-007", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "continuity-layer", "name": "Disclosure retention and acceptance limits", "description": "Provide recipient-scoped local projections and assembly-copy disposal evidence without changing source masters. Reproducibility is bounded by available representations, pinned methods and permissions. Tombstones and digests can themselves be sensitive and require a retention basis.", "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ], "findings": [ { "id": "continuity-finding", "name": "Disclosure retention and acceptance limits", "description": "Provide recipient-scoped local projections and assembly-copy disposal evidence without changing source masters. Reproducibility is bounded by available representations, pinned methods and permissions. Tombstones and digests can themselves be sensitive and require a retention basis.", "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ], "questions": [ { "id": "continuity-q1", "text": "Which policy governs retention and erasure of assembly payloads and their derived metadata?", "kind": "retention", "answer_data": [ "retention_policy_ref", "payload_schedule", "metadata_schedule", "hold_ref", "deletion_authority", "disposal_evidence_ref" ] }, { "id": "continuity-q2", "text": "Which recipient projection can disclose lineage without exposing denied payloads or identifiers?", "kind": "access", "answer_data": [ "recipient_scope", "permitted_fields", "opaque_refs", "redaction_report", "access_decision_ref" ] }, { "id": "continuity-q3", "text": "Which mapping and loss report accompany an exported assembly representation?", "kind": "interoperability", "answer_data": [ "export_profile", "mapping_version", "ordered_member_mapping", "unsupported_fields", "integrity_scope", "refusal_conditions" ] }, { "id": "continuity-q4", "text": "Which adversarial acceptance cases and unresolved implementation gaps limit operational use?", "kind": "validation", "answer_data": [ "fixture_set_ref", "expected_outcomes", "executed_results_ref", "unresolved_gaps", "review_status" ] } ], "data_elements": [ { "id": "continuity-data1", "name": "Disclosure retention and acceptance limits - retention record", "description": "Candidate structured answer group: retention_policy_ref; payload_schedule; metadata_schedule; hold_ref; deletion_authority; disposal_evidence_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] }, { "id": "continuity-data2", "name": "Disclosure retention and acceptance limits - access record", "description": "Candidate structured answer group: recipient_scope; permitted_fields; opaque_refs; redaction_report; access_decision_ref. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] }, { "id": "continuity-data3", "name": "Disclosure retention and acceptance limits - interoperability record", "description": "Candidate structured answer group: export_profile; mapping_version; ordered_member_mapping; unsupported_fields; integrity_scope; refusal_conditions. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] }, { "id": "continuity-data4", "name": "Disclosure retention and acceptance limits - validation record", "description": "Candidate structured answer group: fixture_set_ref; expected_outcomes; executed_results_ref; unresolved_gaps; review_status. Preserve unknown, withheld and not-applicable states with reasons. Nested executable schemas are deferred.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] } ], "artifacts": [ { "id": "continuity-artifact", "name": "Disclosure retention and acceptance limits record", "description": "Assembly-owned evidence projection containing the declared answer groups, revision and access labels. Payload capture is conditional on authority; metadata-only representation must state reconstruction limits.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system record identifier, then governed IRI, then locally assigned UUID; revision and assembly reference are explicit. Time and digest are attributes, not identity substitutes.", "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "register-assembly", "name": "Register an assembly revision", "description": "Proposed operation, not implemented. Record a new local aggregate for an intended invocation and capture boundary.", "inputs": [ "invocation reference", "master namespace", "custodian and purpose", "capture profile" ], "outputs": [ "assembly and revision references or refusal" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Create an assembly record only; no inference or retrieval is performed" ], "source_refs": [ "SRC-002", "SRC-003" ] }, { "id": "record-membership", "name": "Record membership dispositions", "description": "Proposed operation, not implemented. Attach source-qualified candidate inclusion and omission evidence with minimum permitted metadata.", "inputs": [ "candidate batch references", "source representations", "policy decision references", "expected revision" ], "outputs": [ "membership ledger or refusal" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Create local membership records; do not query sources or modify memory" ], "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "record-derivation", "name": "Record an assembly derivation", "description": "Proposed operation, not implemented. Link supplied transformation results to inputs with ordering and loss evidence.", "inputs": [ "input references", "transformation evidence", "output representation", "loss report" ], "outputs": [ "derivation ledger or refusal" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Record a local derivation; do not execute redaction or consolidate durable memory" ], "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "assess-budget", "name": "Assess a declared assembly budget", "description": "Proposed operation, not implemented. Apply only a pinned local accounting profile to supplied final-representation measurements; refuse a fit claim for missing or incomparable mandatory values.", "inputs": [ "final representation reference", "counting profile", "measurements and uncertainty", "capacity and reserves" ], "outputs": [ "reconciliation and fit assessment or blocked report" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Create a local assessment; no universal tokenizer, billing reconciliation or runtime acceptance is implemented" ], "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "seal-assembly", "name": "Seal an observable assembly", "description": "Proposed operation, not implemented. Validate local completeness, dependencies, current authorization evidence and budget assessment before binding a revision to supplied integrity evidence.", "inputs": [ "expected revision", "membership and placement records", "current policy evidence", "fit assessment", "payload or metadata capture record" ], "outputs": [ "sealed manifest or rejection with blockers" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Freeze the local revision; dispatch, inference and external authority changes remain outside this operation" ], "source_refs": [ "SRC-003", "SRC-005", "SRC-007", "SRC-008" ] }, { "id": "project-assembly", "name": "Prepare a recipient projection", "description": "Proposed operation, not implemented. Create a local authorized view with redaction, mapping losses and reconstruction limits.", "inputs": [ "sealed revision", "recipient authorization", "target mapping profile", "retention policy" ], "outputs": [ "local projection and loss report or refusal" ], "preconditions": [ "Verified accountable role, tenant, purpose and recipient scope", "Current source and policy evidence; unresolved required authority causes refusal", "Expected revision and idempotency key for mutation; mismatch causes refusal" ], "effects": [ "Create a local artifact only; no transmission, access expansion or source deletion" ], "source_refs": [ "SRC-003", "SRC-005", "SRC-007" ] } ], "composition": [ { "target": "WM-AI-004", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference the intended invocation and observed dispatch receipt. Registry parent is not ratified subtype inheritance: an assembly is an input aggregate, not the execution, output, tool loop or cost ledger.", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-008" ] }, { "target": "WM-MEM-002", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Source memory keeps its identity and lifecycle. Assembly membership captures a version-qualified projection; copying it does not create new authoritative memory.", "required": false, "source_refs": [ "SRC-001", "SRC-003" ] }, { "target": "WM-MEM-007", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference retrieval candidate batches and ranks when present. This model records inclusion decisions for available candidates, not querying or ranking the corpus.", "required": false, "source_refs": [ "SRC-001", "SRC-003" ] }, { "target": "WM-MEM-008", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Transient assembly transformation records do not own durable merging, memory retirement or consolidation policy.", "required": false, "source_refs": [ "SRC-003", "SRC-004" ] }, { "target": "WM-MEM-009", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference the rule and recorded conflict disposition. A similarity score, recency or slot position cannot establish authority or truth.", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "target": "WM-MEM-010", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference an applicable disposal policy for assembly copies; source-memory erasure remains externally executed.", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "target": "WM-MEM-011", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference recipient, purpose and tenant authorization decisions; this model cannot grant access or infer it from readability.", "required": false, "source_refs": [ "SRC-001", "SRC-005" ] }, { "target": "WM-MEM-014", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Index configuration and refresh remain external; snapshot and retrieval references may qualify a candidate batch.", "required": false, "source_refs": [ "SRC-001", "SRC-003" ] }, { "target": "WM-MEM-015", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Passage masters retain segmentation and source lineage. The assembly records only the included representation, selector and placement.", "required": false, "source_refs": [ "SRC-003", "SRC-004" ] }, { "target": "WM-MEM-016", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Inclusion is not evidence of causal use or answer support. Claim-to-source grounding and answer evaluation remain external.", "required": false, "source_refs": [ "SRC-003", "SRC-008" ] }, { "target": "WM-MEM-017", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference policy revision and decision evidence. Rule definition, precedence governance and enforcement remain external.", "required": false, "source_refs": [ "SRC-002", "SRC-005" ] }, { "target": "WM-MEM-018", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference a qualified assessment with its scope and validity, without generating a new trust score.", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "target": "WM-MEM-020", "relation": "REFERENCE", "purpose": "Candidate binding, not a mandatory runtime dependency. Reference authorized redaction or quarantine outcomes and resulting representations. The assembly does not release quarantined memory or implement the redaction service.", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "target": "MCP 2025-06-18", "relation": "ALIGN", "purpose": "Conceptual resources and sampling mapping; not a required transport or complete context audit format.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "PROV-O 2013-04-30", "relation": "ALIGN", "purpose": "Conceptual derivation and attribution mapping; no truth or authorization inference.", "required": false, "source_refs": [ "SRC-003" ] }, { "target": "Web Annotation Data Model 2017-02-23", "relation": "ALIGN", "purpose": "Optional source selectors with version-qualified representation states.", "required": false, "source_refs": [ "SRC-004" ] }, { "target": "RFC 8785", "relation": "ALIGN", "purpose": "Optional JSON digest profile only when its data constraints are met; other bindings declare their own byte rules.", "required": false, "source_refs": [ "SRC-007" ] }, { "target": "OpenTelemetry GenAI client inference", "relation": "ALIGN", "purpose": "Development telemetry alignment; pin an immutable revision before implementing a mapping.", "required": false, "source_refs": [ "SRC-008" ] } ], "serviceLayers": { "dimension": { "owner_package_requirements": [ "Accountable assembly custodian role and tenant namespace", "Pinned capture, interface, counting and authorization profiles with decision authorities", "Retention and disclosure schedule for payloads, lineage, hashes and withheld metadata", "Explicit handling of unknown effective context and externally owned source records" ], "namespace_guidance": "Use an adopting-Dimension namespace for assembly, revision and membership IDs. Preserve external master identifiers; do not embed timestamps or commercial ownership names in IDs.", "registry_links": [ "vr.wm-mem-013", "WM-AI-004", "WM-MEM-017" ] }, "canon_and_patch": { "canonicalization_rules": [ "Preserve member order, roles, media types, source revisions and uncertainty states in every binding.", "Declare digest scope as raw payload bytes, serialized manifest bytes or a pinned canonical profile; never label a regular serializer RFC 8785 compliant without tests." ], "patch_rules": [ "Draft updates require expected revision and authority checks; sealed content changes create a successor revision.", "A policy, recipient, source, tokenizer, wrapper or role change invalidates dependent fit and sealing evidence until rechecked." ], "compatibility_rules": [ "Reject a projection that loses mandatory order, authority, budget units or source provenance.", "Pin external mappings and report unsupported fields; no source specification requires this hierarchy." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier", "Governed global identifier or IRI", "UUID or ULID allocated by the adopting Dimension" ], "timestamp_rule": "Use RFC 3339 with seconds and explicit offset or Z. Distinguish source effective time, assembly event time and observation or ingestion time; retain precision and clock uncertainty.", "serial_naming_rule": "Use stable artifact ID plus explicit revision; timestamps and content hashes are metadata. Serial records identify sequence and predecessor separately.", "integrity_rule": "Store digest algorithm, scope and encoding plus verification state. A valid digest proves neither provenance truth, disclosure authority nor delivery. Sensitive hashes require access and retention controls." }, "policies": [ "Default deny across tenants, roles and destinations; source readability alone does not authorize inclusion or reuse.", "Treat retrieved content and tool results as untrusted data unless an external policy explicitly authorizes a role; formatting is not security enforcement.", "Do not retain secrets or personal payloads merely for reproducibility; obey the approved minimal evidence profile and record loss of reconstructability.", "Required policy, dependency or budget gaps block readiness; an intentionally empty assembly needs explicit profile authorization.", "Referenced policy engines, source masters and execution systems retain their operational authority. Dangerous subjects remain at policy level." ], "crud": { "read": [ "Authorize lineage metadata and payload access independently; record the requested view and disclose limitations." ], "create": [ "Bind the new assembly to intended invocation, custodian, capture boundary and current profile decisions." ], "update": [ "Use optimistic concurrency and idempotency; create a successor for changes to a sealed revision and recheck dependent evidence." ], "delete": [ "Retire assembly copies under the external retention policy and authorized disposal service; observe valid holds and collect disposal evidence.", "Remove payloads and sensitive metadata when authorized; keep only permitted minimal tombstones. Deleting an assembly does not delete referenced source memory or erase already disclosed copies." ] }, "roles": [ { "name": "Assembly custodian", "responsibilities": [ "Maintains identity, declared scope and retention decisions within delegated authority." ] }, { "name": "Assembly preparer", "responsibilities": [ "Records permitted source membership, placement and supplied derivation evidence." ] }, { "name": "Policy decision authority", "responsibilities": [ "Owns external authorization and exception decisions; cannot infer authority from rank or context position." ] }, { "name": "Validation reviewer", "responsibilities": [ "Reviews budget accounting, lineage and sealed revision evidence; reports limits and blocked checks." ] }, { "name": "Authorized consumer", "responsibilities": [ "Uses only the permitted projection and preserves uncertainty and source-master boundaries." ] } ], "access": { "default_rule": "Deny unless the current tenant, purpose, recipient and content-specific grant permit the requested view; recheck at sealing and later reuse.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Document time-limited, purpose-specific exceptions through an external authorized decision; unknown authority is not an exception." ], "audit_requirements": [ "Reference external access audit records with actor, purpose, time, revision, decision and view scope; this model does not own the general audit system.", "Avoid logging denied source content or secrets in omissions and failure reports." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "Adopting Dimension policies and authority scope", "AGENTS.md", "spec.yaml and publication holds", "Pinned source-master and profile references", "Current assembly revision and permitted artifacts" ] } }, "coverage": { "claim": "Source-grounded proposed structure for an invocation-bound context assembly with eight open primary sources, explicit source lineage, ordered input representation, qualified budget accounting and capture limits. A separate frozen local no-tools self-audit found no critical semantic conflict. This remains a reviewable draft with independent-review, source/version, adopting-profile and executable-conformance holds.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Assembly, revision, membership and invocation identities are distinct." }, { "dimension": "lifecycle", "status": "covered", "notes": "Prepared, blocked, sealed, rejected and superseded local states preserve external dispatch evidence." }, { "dimension": "relationships", "status": "covered", "notes": "Candidate sibling references retain source, policy and runtime ownership." }, { "dimension": "temporal", "status": "covered", "notes": "Effective, retrieved, modified and observed times remain distinct with uncertainty." }, { "dimension": "provenance", "status": "covered", "notes": "Version-qualified selectors and derivation edges preserve lineage and its gaps." }, { "dimension": "ownership", "status": "covered", "notes": "Role-based custodian and external master ownership are explicit." }, { "dimension": "validation", "status": "covered", "notes": "Local structural questions and proposed admission checks are defined; executable acceptance is a gap." }, { "dimension": "access", "status": "covered", "notes": "Recipient, purpose and tenant checks apply to metadata, payloads and reuse." }, { "dimension": "retention and deletion", "status": "covered", "notes": "Assembly copies follow an external policy; source erasure and prior disclosure remain distinct." }, { "dimension": "interoperability", "status": "covered", "notes": "Optional mappings preserve role, sequence, lineage and declared losses." }, { "dimension": "direct properties", "status": "covered", "notes": "Media, order, count basis, capacity, status and capture visibility are abstract-object properties." }, { "dimension": "recognition and observation", "status": "covered", "notes": "Capture boundary and evidence differentiate a prepared artifact from runtime effective input." }, { "dimension": "capabilities and actions", "status": "covered", "notes": "Six proposed local operations have preconditions and effects; no execution authority is implied." }, { "dimension": "physical properties", "status": "not-applicable", "notes": "The aggregate has no intrinsic mass or geometry; source media extents are representation properties." }, { "dimension": "token and modality accounting", "status": "covered", "notes": "Estimates, reported usage, subsets, reserves and incomparable units stay separate." }, { "dimension": "instance conformance", "status": "gap", "notes": "Nested schemas, executable profile adapters and operational adversarial fixtures are not implemented." }, { "dimension": "independent external review", "status": "gap", "notes": "Claude and Grok skipped under the single-provider waiver; local self-audit is not independent review." }, { "dimension": "source verification", "status": "gap", "notes": "Selected web-service content reviewed. Direct HTTP checks unattempted under the owner-reported block; immutable pins for living guidance remain pending." } ], "known_omissions": [ "Executable nested instance schemas, target-specific tokenizers and multimodal counting adapters", "Immutable revision pins for living OWASP and OpenTelemetry documents and comprehensive errata review", "Operational acceptance fixtures for opaque state, changing grants, empty context, truncation and nondeterministic transformations", "Hidden runtime context and causal use of inputs cannot be reconstructed from this local record alone" ], "conflicts": [], "regional_assumptions": [ "No universal retention period, jurisdictional entitlement, language encoding or model capacity is assumed; adopting profiles must be reviewed.", "This is a technical context record, not a compliance certificate or permission to process sensitive data." ], "adversarial_checks": [ "A high-priority resource does not become an authorized instruction.", "Retrieval success or context inclusion does not prove answer grounding.", "Do not subtract cached subsets from total input merely to satisfy capacity.", "Reject stale grants and source-version mismatches at sealing; preserve the failed attempt.", "A metadata-only snapshot cannot claim full payload replay; hashes may also be sensitive.", "Never silently truncate protected instructions or break message dependencies to make a budget fit." ] }, "researchAdjudication": { "providerMode": "single-provider-waiver", "activeProviders": [ "codex" ], "waivedProviders": [ "claude", "grok" ], "providerPolicy": { "contract_version": "1.0.0", "mode": "single-provider-waiver", "effective_at": "2026-09-06T00:00:00Z", "scope": "Canonical single-stream subject-model research after the six-workstream consolidation", "active_providers": [ "codex" ], "waived_providers": [ { "provider": "claude", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "Prior bounded attempts timed out. The repository owner prioritized completion under the single-provider waiver." }, { "provider": "grok", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "The repository owner authorized completion without Grok when Grok is unavailable, slow or schema-invalid. Grok may still be attempted as a bounded supplemental reviewer, but its failure never blocks a valid Claude plus no-tools result." } ], "review_rule": "Codex may complete source-grounded fallback research after bounded Claude and Grok attempts fail. It requires a separate no-tools adversarial audit and remains reviewable-draft with a visible absence-of-external-review hold.", "supplemental_provider_attempts": [ { "provider": "claude", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." }, { "provider": "grok", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." } ] }, "boundaryDecision": { "entry_kind": "aggregate", "status": "accepted", "rationale": "The root binds locally owned membership, placement, transformation and accounting records into one versioned input aggregate. Its construction activity and target inference execution remain separate references. The registry standalone-mm value is a registry-plane category, not a subject-kind enum; the parent candidate does not make context an inference-run subtype." }, "decisions": [ { "concept": "Aggregate versus process boundary", "disposition": "accepted", "rationale": "Identity and capture questions describe a versioned input aggregate. Preparation, sealing and dispatch evidence do not make the root an execution event or reusable policy template." }, { "concept": "Registry parent and proposed siblings", "disposition": "qualified", "rationale": "No explicit relation-ledger rows bind this model. WM-AI-004 is a reference candidate; all 13 sibling links preserve target masters and do not silently impose subtype inheritance or mandatory runtime dependencies." }, { "concept": "Prepared versus effective context", "disposition": "separated", "rationale": "The result records capture stage, observer and missing components. A prepared artifact, receipt, cached handle or usage report cannot prove exact runtime effective context or causal use in an answer." }, { "concept": "Candidate selection versus recall", "disposition": "accepted", "rationale": "The model records supplied candidate sets and local dispositions with completeness limits. It does not query the corpus, rank source truth, or own the retrieval index lifecycle." }, { "concept": "Instruction authority and source priority", "disposition": "qualified", "rationale": "Resource annotations and placement cannot elevate source content into an authorized instruction. The assembly references current policy decisions, and text separation is explicitly insufficient as an enforcement boundary." }, { "concept": "Source revisions selectors and timestamps", "disposition": "accepted", "rationale": "Source identity, representation, selector units and temporal assertions remain separate. Changed source versions or ambiguous selectors cannot be silently substituted; uncertain clocks do not establish authority." }, { "concept": "Derived content and durable consolidation", "disposition": "separated", "rationale": "Assembly-local derivation records preserve all input links, losses and qualifications. They neither execute redaction nor retire durable memory, and summaries receive no implicit authority upgrade." }, { "concept": "Ordering and content dependencies", "disposition": "accepted", "rationale": "Logical order, roles, target mappings and grouped dependencies are explicit. Tool-related inputs are inert records here; truncation that breaks a required group blocks readiness." }, { "concept": "Budget units and double counting", "disposition": "accepted with profile qualification", "rationale": "The fit rule applies only to compatible additive units and overhead not already included. Counts retain tokenizer, serializer, modality and origin qualifiers. Cached subsets are not automatically subtracted from capacity usage." }, { "concept": "Unknown budget and opaque state", "disposition": "qualified", "rationale": "Missing mandatory counting evidence blocks a fit claim, while hidden state and unavailable payloads constrain reconstruction. An empty assembly requires profile permission and must not be confused with unknown content." }, { "concept": "Sealing and local operation authority", "disposition": "accepted as proposed only", "rationale": "Six unimplemented local operations have authority and revision preconditions and refusal outcomes. Sealing does not dispatch a request, execute a model or grant access; retries preserve references without claiming behavioral equivalence." }, { "concept": "Disclosure retention and tombstones", "disposition": "accepted with policy dependency", "rationale": "Metadata, hashes and omission details can be sensitive. Local copies follow an external retention policy and disposal authority; auditability does not require perpetual payload retention or deletion of source masters." }, { "concept": "Research schema versus instance conformance", "disposition": "deferred", "rationale": "The candidate object groups and conceptual mappings pass research structure checks but do not provide executable nested instance constraints, runtime counting adapters or operational adversarial test results." }, { "concept": "Source and version evidence", "disposition": "limited", "rationale": "Selected content from eight primary sources was reviewed through the web service. Direct HTTP was not attempted under the owner-reported restriction. Living and development documents remain unpinned; the audit cannot turn content access into current-version or origin-status verification." }, { "concept": "Provider waiver and assurance", "disposition": "waived and held", "rationale": "Claude and Grok have zero attempts and no admitted results for this run. This separate Codex semantic self-audit uses frozen evidence and adds no facts; it is not independent external review." } ], "publicationHolds": [ "Independent external review is absent. Claude and Grok were skipped with zero attempts under the owner-authorized single-provider waiver; the separate local Codex no-tools self-audit is not an independent second-provider review.", "Source verification remains incomplete. Eight sources supplied selected web-service content, but direct HTTP checks were not attempted under the owner-reported sandbox restriction: statuses are unmeasured and measured HTTP 200 count is zero. Immutable pins for living OWASP and OpenTelemetry material, full applicability and errata review remain pending.", "Adopting profiles must establish current authority, recipient and tenant boundaries, retention, disclosure, source rights, tokenizer and serializer identity, modality accounting, dependency rules and limits of runtime observability before operational use.", "Nested instance schemas, pinned neighboring-model bindings, executable budget and interface adapters, conformance mappings and operational adversarial fixtures are incomplete. No runtime, security-resistance, legal-compliance or exact-context-reconstruction certification is claimed.", "Independent external review was explicitly waived by the repository owner; this codex-only result remains a reviewable draft." ], "deferredResearch": [ "Run the coordinator source checker outside the sandbox, verify relevant document sections and errata, and pin immutable revisions for mutable guidance before implementing mappings.", "Develop executable nested schemas and profile fixtures for stale grants, changed sources, hidden context, multimodal counts, cached subsets, unsafe truncation, permitted empty assemblies and copy disposal.", "Restore independent external review and qualify adopting profiles before any canonical or publishable-draft promotion." ] }, "statistics": { "sources": 8, "bundles": 6, "layers": 12, "findings": 12, "questions": 48, "artifacts": 12, "functions": 6 } }